Vulnerabilities > Phpgurukul > ZOO Management System > High

DATE CVE VULNERABILITY TITLE RISK
2022-09-26 CVE-2022-40924 Unrestricted Upload of File with Dangerous Type vulnerability in PHPgurukul ZOO Management System 1.0
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system.
network
low complexity
phpgurukul CWE-434
7.2
2022-09-26 CVE-2022-40925 Unrestricted Upload of File with Dangerous Type vulnerability in PHPgurukul ZOO Management System 1.0
Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system.
network
low complexity
phpgurukul CWE-434
7.2
2022-09-22 CVE-2022-40932 Unrestricted Upload of File with Dangerous Type vulnerability in PHPgurukul ZOO Management System 1.0
In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system.
network
low complexity
phpgurukul CWE-434
7.2
2022-04-08 CVE-2022-27992 SQL Injection vulnerability in PHPgurukul ZOO Management System 1.0
Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.
network
low complexity
phpgurukul CWE-89
8.8
2020-09-22 CVE-2020-25487 SQL Injection vulnerability in PHPgurukul ZOO Management System 1.0
PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php.
local
low complexity
phpgurukul CWE-89
7.8